Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A947EC0FD8D11EFA3B5907B762E951A.roa
File: 5A947EC0FD8D11EFA3B5907B762E951A.roa (raw, json)
Hash identifier: 5+15oxmwULrcIOoxTi+RUwS8U0N79ENXdWO3Li9LYyQ=
Subject key identifier: 95:04:79:97:04:E7:2B:75:59:A3:4F:1D:79:FF:1D:93:25:4C:55:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017333
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A947EC0FD8D11EFA3B5907B762E951A.roa
Signing time: Mon 10 Mar 2025 08:55:03 +0000
ROA not before: Mon 10 Mar 2025 08:54:58 +0000
ROA not after: Mon 14 Apr 2025 08:54:58 +0000
asID: 272854
IP address blocks: 154.194.44.0/24 maxlen: 24
154.197.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95027 (0x17333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 10 08:54:58 2025 GMT
Not After : Apr 14 08:54:58 2025 GMT
Subject: CN=67cea8e6-e49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f5:c0:e0:08:cb:81:94:03:5c:0f:4c:88:13:
ba:25:11:1c:5b:e2:33:a3:2d:90:79:b2:1f:29:6f:
9a:81:7d:a0:df:d1:03:ec:60:12:1a:e1:9c:04:fd:
54:01:31:1a:20:88:13:2c:1c:90:73:cc:43:c9:8d:
d2:4a:89:46:5e:34:fd:2b:4b:12:a7:8d:a0:4f:95:
1c:17:2a:72:7e:38:4c:1c:a6:f8:c0:43:25:12:64:
4f:f9:78:b3:7e:38:ce:65:af:b7:f6:e0:44:5f:30:
54:60:c7:1f:95:52:87:3e:eb:36:14:64:5d:87:35:
5f:f4:05:4c:aa:80:54:6e:7f:9f:9b:a7:c2:99:cf:
c1:0c:43:09:89:71:e4:2b:29:b7:e1:17:ba:3a:f1:
a3:89:d4:f4:e2:e7:16:b0:80:6e:f4:48:d8:97:08:
dd:81:57:d2:d9:c7:62:33:bd:b0:ef:90:d8:f3:22:
19:34:33:8a:6f:f0:70:46:be:db:93:f7:16:bd:69:
ea:ee:33:c6:14:cd:01:8f:4a:e2:a2:90:64:6f:9c:
67:69:4b:e0:29:22:5c:8d:83:6c:d7:87:53:cb:5d:
e5:0e:98:b4:ae:07:34:14:6b:00:fc:18:3c:17:c6:
2f:89:73:c9:da:15:ba:39:11:4a:4b:15:21:36:cd:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:04:79:97:04:E7:2B:75:59:A3:4F:1D:79:FF:1D:93:25:4C:55:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A947EC0FD8D11EFA3B5907B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.44.0/24
154.197.1.0/24
Signature Algorithm: sha256WithRSAEncryption
63:41:89:62:98:80:6c:ba:e8:93:56:57:1b:ab:f7:eb:b4:8c:
d7:29:27:36:51:2e:ad:2d:7f:85:b1:4f:27:77:f1:86:74:95:
ef:d4:23:a7:1b:6f:2e:9c:36:8c:9f:f1:b3:8f:4c:ff:4a:eb:
0d:83:1e:47:3f:24:4c:cb:3e:83:28:42:e3:9f:48:02:74:4c:
9b:4f:ed:f1:31:8f:42:8b:b1:e2:2a:39:d2:6c:dc:1f:ce:89:
86:52:40:0e:0c:67:b4:dd:b4:8f:f6:24:c0:aa:c9:99:2d:c5:
6f:79:53:c8:d2:b9:a9:a5:18:fa:7b:95:d4:13:8d:bc:9e:d7:
26:54:16:49:37:18:64:fd:00:c8:af:ad:c4:33:ab:9d:c4:c9:
0d:18:98:5b:17:f3:cb:2d:d7:76:25:bf:e0:64:0b:c2:66:cf:
08:12:e7:6a:0a:1c:02:f8:ee:5a:9a:73:eb:d3:57:5b:73:9f:
20:96:23:ca:26:b7:aa:be:bc:db:f3:cb:ec:a1:e1:bf:83:0a:
4b:4d:a5:cc:23:64:f6:81:a3:20:36:2d:4b:2c:94:da:32:6c:
94:16:83:4b:da:a1:c6:e1:d3:65:c1:95:44:0f:cf:2d:94:51:
90:cc:df:1e:58:64:35:2b:26:e5:1b:8e:23:79:46:b9:e9:55:
6c:ea:b3:f3
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAXMzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzEwMDg1NDU4WhcNMjUwNDE0MDg1NDU4WjAYMRYw
FAYDVQQDEw02N2NlYThlNi1lNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4vXA4AjLgZQDXA9MiBO6JREcW+Izoy2QebIfKW+agX2g39ED7GASGuGc
BP1UATEaIIgTLByQc8xDyY3SSolGXjT9K0sSp42gT5UcFypyfjhMHKb4wEMlEmRP
+XizfjjOZa+39uBEXzBUYMcflVKHPus2FGRdhzVf9AVMqoBUbn+fm6fCmc/BDEMJ
iXHkKym34Re6OvGjidT04ucWsIBu9EjYlwjdgVfS2cdiM72w75DY8yIZNDOKb/Bw
Rr7bk/cWvWnq7jPGFM0Bj0riopBkb5xnaUvgKSJcjYNs14dTy13lDpi0rgc0FGsA
/Bg8F8YviXPJ2hW6ORFKSxUhNs2GUQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFJUE
eZcE5yt1WaNPHXn/HZMlTFUWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QTk0N0VDMEZEOEQxMUVGQTNCNTkwN0I3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmsIsAwQAmsUBMA0GCSqG
SIb3DQEBCwUAA4IBAQBjQYlimIBsuuiTVlcbq/frtIzXKSc2US6tLX+FsU8nd/GG
dJXv1COnG28unDaMn/Gzj0z/SusNgx5HPyRMyz6DKELjn0gCdEybT+3xMY9Ci7Hi
KjnSbNwfzomGUkAODGe03bSP9iTAqsmZLcVveVPI0rmppRj6e5XUE428ntcmVBZJ
Nxhk/QDIr63EM6udxMkNGJhbF/PLLdd2Jb/gZAvCZs8IEudqChwC+O5amnPr01db
c58gliPKJreqvrzb88vsoeG/gwpLTaXMI2T2gaMgNi1LLJTaMmyUFoNL2qHG4dNl
wZVED88tlFGQzN8eWGQ1KyblG44jeUa56VVs6rPz
-----END CERTIFICATE-----
Generated at Thu Apr 10 23:48:27 2025 by rpki-client